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Claim Rejections - 35 USC §112 

1 . The following is a quotation of the second paragraph of 35 U.S.C. 112: 

The specification shall conclude with one or more claims particularly pointing out and distinctly 
claiming the subject matter which the applicant regards as his invention. 

2. Claims 5, 6, 17 and 18 recite the limitation "answers to user selected questions" 
in the second line of each claim. There is insufficient antecedent basis for this limitation 
in the claim in their respective independent claims. 

Claim Rejections - 35 USC § 101 

3. 35 U.S.C. 101 reads as follows: 

Whoever invents or discovers any new and useful process, machine, manufacture, or composition of 
matter, or any new and useful improvement thereof, may obtain a patent therefor, subject to the 
conditions and requirements of this title. 

4. Claims 12 and 24 are rejected under 35 U.S.C. 101 because the claimed 
invention is directed to non-statutory subject matter. The claims recite that a "topic is 
selected based on psychological insights." Per page 11, lines 5-20 of the applicant's 
specification, "psychological insights" is not defined to have a tangible result, as it is a 
completely subjective analysis. There is no evidence that a tangible or concrete result 
(e.g., repeatable) will follow deriving questions that the user can "easily remember" 
based on "psychological insights." This is evidenced by the use of the descriptor "many 
people" regarding useful results. The percentages given regarding "many people" are 
also subjective (e.g., vary by each survey). 
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5. Claim 25 is rejected under 35 U.S.C. 101 because the claimed invention is 
directed to non-statutory subject matter. "A machine readable medium" claimed to 
contain "one or more programs" is still a program per se, which could be correlated with 
non-functional descriptive material (outlined as nonstatutory). Typically, computer- 
executable code embodied on a machine-readable medium that causes the machine to 
perform a method when executed would be considered statutory, but an article of 
manufacture comprising machine-readable medium is to claim the medium itself and not 
just the method. 



Claim Rejections - 35 USC § 102 

6. The following is a quotation of the appropriate paragraphs of 35 U.S.C. 102 that 
form the basis for the rejections under this section made in this Office action: 

A person shall be entitled to a patent unless - 

(b) the Invention was patented or described in a printed publication in this or a foreign country or in public 
use or on sale in this country, more than one year prior to the date of application for patent in the United 
States. 

7. Claims 1-25 are rejected under 35 U.S.C. 102(b) as being anticipated by 
Kanevsky et al. (U.S. Patent No. 5,774,525). 

Claim 1. A method for generating a password for a user, comprising [Column 4, lines 
14-19]: 

presenting said user with at least one topic [Column 6, lines 11-15; categories is 
equivocal to "topics"]; 

receiving one or more personal details from said user associated with said at least 
one topic [column 2, lines 8-22]; 

ensuring that a correlation between said user and said one or more personal details 
does not violate one or more predefined correlation rules [Column 2, lines 27-40; 
"minimum amount of information contained in the question" is equivocal to "minimizing 
correlation between user and information requested," which is a form a correlation and 
is the exact correlation claimed by this claims dependent claims]; and 
recording said one or more personal details as a password for said user [Columns 10 
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and 11, lines 65-67 and 1-5]. 

Claim 2. The method of claim 1 , further comprising the step of receiving a reminder 
associated with each of said one or more personal details [Column 3, lines 26-33; A 
question is inherently a "reminder" to the answer, where the other case of such a 
system would be password/authentication data entry without a question or other 
information presented beforehand]. 

Claim 3. The method of claim 1 , further comprising the step of presenting said user 
with a plurality of topics and receiving a user selection of said at least one topic [Column 
4, lines 43-45; The Examiner finds that asking a question based on another question 
teaches 'asking a user for a topic to ask a question' as presented by the instant 
application]. 

Claim 4. The method of claim 1 , wherein said correlation rules are based on said at 
least one topic [Column 6, lines 35-45; Topics is equivocal to Categories, and the data 
is clearly correlated by the type of data of the category/topic]. 

Claim 5. The method of claim 1 , wherein said one or more predefined correlation rules 
ensure that answers to user selected questions cannot be qualitatively correlated with 
said user [Column 2, lines 25-40; minimum qualitatively user-correlated data 
intentionally absent]. 

Claim 6. The method Of claim 1 , wherein said one or more predefined correlation rules 
ensure that answers to user selected questions cannot be quantitatively correlated with 
said user [Column 2, lines 25-40; Same reasoning as claim 5; AND Column 6, lines 40- 
44; By combining the quantitative user-correlated data through mathematical 
operations, it is not longer possible to correlate said data to the user (owner)]. 
Claim 7. The method of claim 1 , further comprising the step of sending said one or 
more personal details to said user as a reinforcement of said password [Column 3, lines 
26-33; A question inherently contains "personal details" - same reasoning as claim 2]. 
Claim 8. The method of claim 1, wherein said one or more personal details are related 
to a personal fact from a past of said user [Column 6, lines 10-28]. 
Claim 9. The method of claim 1, wherein said one or more personal details are related 
to an experience of said user in connection with a public event [Column 6, lines 10-28]. 
Claim 10. The method of claim 1, wherein said one or more personal details are 
related to an experience of said user in connection with a private event [Column 6, lines 
10-28]. 

Claim 11. The method of claim 1, wherein said one or more personal details can be 
tested during a verification phase using one or more of Boolean, multiple choice, 
numeric or textual queries [Column 9, lines 25-40; Where the 'second question' is 
Boolean (having a random probability of one-half) and the first and third questions 
represent alphanumeric and/or multiple choice answers]. 

Claim 12. The method of claim 1, wherein said at least one topic is selected based on 
psychological insights [Column 5, lines 60-65; It can be said that "psychological insight" 
can be wrought through correlation between answers of questions]. 
Claim 13. 

An apparatus for generating a password for a user, comprising: 
a memory; and 
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at least one processor, coupled to the memory, operative to: 
present said user with at least one topic; 

receive one or more personal details from said user associated with said at least one 
topic; 

ensure that a correlation between said user and said one or more personal details does 
not violate one or more predefined correlation rules; and 

record said one or more personal details as a password for said user [Rejected per 
claim 1 - same limitations]. 

Claim 14. The apparatus of claim 13, wherein said processor is further configured to 
receive a reminder associated with each of said one or more personal details [Rejected 
per claim 2]. 

Claim 15. The apparatus of claim 13, wherein said processor is further configured to 
present said user with a plurality of topics and receive a user selection of said at least 
one topic [Rejected per claim 3]. 

Claim 16. The apparatus of claim 13, wherein said correlation rules are based on said 
at least one topic [Rejected per claim 4]. 

Claim 17. The apparatus of claim 13, wherein said one or more predefined correlation 
rules ensure that answers to user selected questions cannot be qualitatively correlated 
with said user [Rejected per claim 5]. 

Claim 18. The apparatus of claim 13, wherein said one or more predefined correlation 
rules ensure that answers to user selected questions cannot be quantitatively correlated 
with said user [Rejected per claim 6]. 

Claim 19. The apparatus of claim 13, wherein said processor is further configured to 
send said one or more personal details to said user as a reinforcement of said 
password [Rejected per claim 7]. 

Claim 20. The apparatus of claim 13, wherein said one or more personal details are 
related to a personal fact from a past of said user [Rejected per claim 8]. 
Claim 21. The apparatus of claim 13, wherein said one or more personal details are 
related to an experience of said user in connection with a public event [Rejected per 
claim 9]. 

Claim 22. The apparatus of claim 13, wherein said one or more personal details are 
related to an experience of said user in connection with a private event [Rejected per 
claim 10]. 

Claim 23. The apparatus of claim 13, wherein said one or more personal details can be 
tested during a verification phase using one or more of Boolean, multiple choice, 
numeric or textual queries [Rejected per claim 11]. 

Claim 24. The apparatus of claim 13, wherein said at least one topic is selected based 
on psychological insights [Rejected per claim 12]. 

Claim 25. An article of manufacture for generating a password for a user, comprising a 
machine readable medium containing one or more programs which when executed 
implement the steps of: 
one topic; 

presenting said user with at least one topic; 

receiving one or more personal details from said user associated with said at least 
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ensuring that a correlation between said user and said one or more personal details 
does not violate one or more predefined correlation rules; and . 
recording said one or more personal details as a password for said user [Rejected per 
claims 1 and 13 - same limitations]. 

Double Patenting 

8. The nonstatutory double patenting rejection is based on a judicially created 
doctrine grounded in public policy (a policy reflected in the statute) so as to prevent the 
unjustified or improper timewise extension of the "right to exclude" granted by a patent 
and to prevent possible harassment by multiple assignees. A nonstatutory 
obviousness-type double patenting rejection is appropriate where the conflicting claims 
are not identical, but at least one examined application claim is not patentably distinct 
from the reference claim(s) because the examined application claim is either anticipated 
by, or would have been obvious over, the reference claim(s). See, e.g., In re Berg, 140 
F.3d 1428, 46 USPQ2d 1226 (Fed. Cir. 1998); In re Goodman, 11 F.3d 1046, 29 
USPQ2d 2010 (Fed. Cir. 1993); In re Longi, 759 F.2d 887, 225 USPQ 645 (Fed. Cir. 
1985); In re Van Omum, 686 F.2d 937, 214 USPQ 761 (CCPA 1982); In re Vogel, 422 
F.2d 438, 164 USPQ 619 (CCPA 1970); and In re Thorington, 418 F.2d 528, 163 
USPQ 644 (CCPA 1969). 

A timely filed terminal disclaimer in compliance with 37 CFR 1.321(c) or 1.321(d) 
may be used to overcome an actual or provisional rejection based on a nonstatutory 
double patenting ground provided the conflicting application or patent either is shown to 
be commonly owned with this application, or claims an invention made as a result of 
activities undertaken within the scope of a joint research agreement. 

Effective January 1, 1994, a registered attorney or agent of record may sign a 
terminal disclaimer. A terminal disclaimer signed by the assignee must fully comply with 
37 CFR 3.73(b). 

9. Claims 1-3,7,11,13-15,19 and 23 provisionally rejected on the ground of 
nonstatutory obviousness-type double patenting as being unpatentable over claims 1 , 4, 
5-7, 10-12, 17-20, 22, 27 and 30-33 of copending Application No. 10/674,288. Although 
the conflicting claims are not identical, they are not patentably distinct from each other 
because both sets of claims are drawn to a method for generating a user password 
based on answers to questions (where the copending application claims "hints" that 
would invoke an answer, just as the "topics" of the instant application - both 
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applications produce the same function by the same means). The most pertinent claim 
correlations, given by the instant claims to the copending claims, are: Claims 1,13 and 
25 to claims 1, 17-19, 27 [Generating a password based on answers from questions 
presented to a user]; Claims 2-4, 7, 8, 11, 14-16, 19, 20 and 23 to claims 4-7, 10, 12, 
21, 22, 28, 30-33 [password based on user input and reinforced by memory "jogging"]. 

This is a provisional obviousness-type double patenting rejection because the 
conflicting claims have not in fact been patented. 

10. Claims 1 , 5-7, 9-10, 13, 17-19, 21-22 and 25 provisionally rejected on the ground 
of nonstatutory obviousness-type double patenting as being unpatentable over claims 1- 
6, 15-16, 21-24 and 26-27 of copending Application No. 10/815,191. Although the 
conflicting claims are not identical, they are not patentably distinct from each other 
because both sets of claims are drawn to forming a password with low correlation to 
said user. The most pertinent correlation between the claims of the instant application 
to the copending application are: Claims 1, 13 and 25 to 1 and 21 [forming a password 
with low correlative values]; Claims 5-7, 9-10,17-19 and 21-22 to claims 2-4, 15-16, 22- 
24 [Defining the low correlation between said password and said user]. 

This is a provisional obviousness-type double patenting rejection because the 
conflicting claims have not in fact been patented. 

1 1 . Claims 1,13 and 25 provisionally rejected on the ground of nonstatutory 
obviousness-type double patenting as being unpatentable over claims 1 , 24 and 39 of 
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copending Application No. 10/626,482. Although the conflicting claims are not identical, 
they are not patentably distinct from each other because both sets of claims are drawn 
to forming a user password based on answers of predetermined questions. The claims 
given match one-to-one respectively. 

This is a provisional obviousness-type double patenting rejection because the ^ 
conflicting claims have not in fact been patented. 

12. Claims 1,13 and 25 provisionally rejected on the ground of nonstatutory 
obviousness-type double patenting as being unpatentable over claims 1, 22 and 32 of 
copending Application No. 10/626,483. Although the conflicting claims are not identical, 
they are not patentably distinct from each other because both sets of claims are drawn 
to forming a user password based on answers of predetermined questions. The claims 
given match one-to-one respectively, as well. 

This is a provisional obviousness-type double patenting rejection because the 
conflicting claims have not in fact been patented. 



Any inquiry concerning this communication or earlier communications from the 
examiner should be directed to Kent L. Williams whose telephone number is 571-270- 
1376. The examiner can normally be reached on Mon-Fri 7:00-4:30 with Alternate 
Fridays Off. 



Application/Control Number: 10/723 416 

Art Unit: 2139 969 

If attempts to reach the examiner by telephone are unsuccessful, the examiner's 
supervisor, Ayaz R. Sheikh can be reached on 571-272-3795. The fax phone number 
for the organization where this application or proceeding is assigned is 571-273-8300. 

Information regarding the status of an application may be obtained from the 
Patent Application Information Retrieval (PAIR) system. Status information for 
published applications may be obtained from either Private PAIR or Public PAIR. 
Status information for unpublished applications is available through Private PAIR only. 
For more information about the PAIR system, see http://pair-direct.uspto.gov. Should 
you have questions on access to the Private PAIR system, contact the Electronic 
Business Center (EBC) at 866-217-9197 (toll-free). If you would like assistance from a 
USPTO Customer Service Representative or access to the automated information 
system, call 800-786-9199 (IN USA OR CANADA) or 571-272-1000. 
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